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REMARKS 

The final Office Action mailed on January 22, 2009 (Paper No. 20 1001 16) has been 
carefully considered. 

The specification is being amended to improve its form, claim 5 is being amended, 
and new claims 9-13 are being added. Thus, claims 5-13 are pending in the application. 

A Request for Continued Examination (RCE)» including a request for entry of this 
Amttidment after Final, is being filed concurrently herewith. Therefore, this Amendment 
after Final should be entered. 

Claims 5-8 are rejected \mder 35 U.S.C. 103 for alleged unpatentability over 
Sasmazel, European Patent Application No. 132810lA2inviewofZeidler, U.S.PatentNo. 
4,578,530. For the reasons stated below, it is submitted that the invention as claimed is 
distinguishable from the cited reference so as to preclude rejection under 35 U.S.C. 103, 

Amendment of Independent Claim 5 ' 
Independent claim 5 is being amended in a minor maimer. 

Specifically, the word "allocated" on line 10 of the claim is being changed to 
'"assigned** so as to compensate for slightiy inaccurate translation of the origmal application 
into English, and so as to more accurately describe the relationship between the coding and 
decoding keys and the information transmitting terminal device. 
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in addition, the word "the" on line 17 of the claim is being leplaced by the word 
"individual" so as to more accurately describe diat the "coding keys" belong to "individual 
infoimation transmitting devices". 

Finally, on line 24 of the clafan, the word "which" is being inserted to improve 
grammatical fonn. 

Therefore, as stated above, these minor amendments are for the purpose of izoproving 
the fonn and accuracy of the cl aim 

Addition of Dependent Claims 9-13 
New dependent claims 9-13 recite features and functions of the invention vMch 
resuh fixOTi the structure of the present invention, as recited in independent claim 5, and 
as described in the specification of the present q)plleation. See also the discussion in die 
section entitied "Additional Arguments*' contained on pages 21-25 of this Amendment 
after Final. 

Rejection under 35 U.S.C. 103 
It should first be noted that the secondary reference cited against this application, 
Zeidler '530, was cited in the International Search Report relative to the corresponding 
international application, but was designated as fidling in Category A, tiiat is, a "document 
defining tiie general state of the art widch is not considered to be of particular relevance" 
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I (quoting from page 1 of the International Search Report). A copy of the International Search 

Report was filed with this application in the Patent and Trademark Office on September 1 , 
2006. 

Furthwmore, a claim coixesponding to independent claim 5 was presented to the 
International Preliminary Examining Authority (IPEA) in order to overcome a rejection, and 
the claim corresponding to independent claim 5 was found by the European Patent Office 
(EPO) to distinguish the invention from the prior art, including the two references now cited 
in thepresent Office Action, was allowed by the EPO, and was validated in over twenty (20) 
European countries. 

Discussion of the Cited References 
The cited reference, Sasmazel '101, presents a set of equipment which realizes coded 
information transfer with a combination of centralized communication networks similar to 
the traditional telephone system and the TAN number system known in the financial 
community. ThedisadvantageofttLemethodandapparatusofSasmazel'lOl isdiatitusesa 
single-key algorithm for the coding of cpnununications, and it stores all of the keys in a 
single place in a main element of the system, the call complex 102 of Figure I of the 
reference. Fuifliermore, all of the communication occurring in the system travels through the 
call complex 102. As a result, the ^stem of Sasmazel ' 10 1 is vulnerable because, if the call 
complex 102 is controlled by an unauthorized person, or if the keys stored in the call 
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complex 102 are illegally possessed, all of the communications taking place in the network 
can be decoded by unauthorized persons. Thus, the call complex 102 of Sasmazel 'lOlcan 
become a primary target for access attacks. 

A further disadvantage of the method and apparatus of Sasmazel ' 1 0 1 is that it is the 
call complex 102 itself that initiates communication in order to establish calls with called end 
temiinals. This makes the call complex 102 vulnerable to well-known hacker techniques. 
Another serious security flaw in the method and apparatus of Sasmazel '101 is that all of ttie 
section keys required for the interpretation of communications are transmitted over the 
communication chaimel of the call complex 102 tiuough a set network point, even though 
coded. The section keys also pass through the network during the call establishment process. 
This characteristic also creates an opportunity for potential attack. In addition, the method 
and apparatus of Sasmazel '101 uses the same section key for both directions of 
communication (see SKLST[n] of Figure 3 of the reference) so that acquisition of one key 
makes it possible to eavesdrop on the entire communication. 

A further disadvantage of the method and apparatus of Sasmazel * 1 0 lis that, since all 
communication is carried out through the call complex 1 02, the data transfer capacity of the 
call complex is continually burdened in proportion to the number of communications taking 
place at any specific point in time. As a result of die above security deficiencies, die method 
and apparatus of Sasmazel '101 are not suitable for creating a secure, general-purpose 
Internet Protocol (IP)-based networic with system-level protection. In contrast, the 
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disadvantages and deficiencies of the method and apparatus of Sasmazel '101, including its 
security flaws, do not occur in tiie present invention. 

Specifically, in the present invention, only a^mmetric keys are used for securing the 
system. The keys required for the decoding and interpretation of communications never pass 
through the communication network while the system is operating, and the decoding keys 
never leave the end terminals or the central traffic coordination unit Moreover, these keys 
cannot be found together at any single point in the system so that, in accordance with the 
invention, the set of devices has in it no point which can be broken into. As a result, it is not 
possible for aU communications in the system to be illegally decoded. In addition, even if 
the central traffic coordination unit or data stored therein were to become illegally possessed, 
it would still be impossible to decode communications taking place in the syst^. 

FuiAermore, in the present invention, the central traffic coordination unit is essentia] 
and unavoidable for the construction of the communication channel between the end 
tenninals, but the constructed communication channel does not pass through the central 
trafiSc coordination unit so that communication between the end terminals takes place 
dhectly between the end tmninals. Accordingly, simultaneous instances of communication 
only use the capacity of the central traffic coordination unit when constructing the 
communication channel, but do not use it when the communication is taking place. 
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Inaddition, in accordance withthepresentinvention.the«isn^ 
through Which all co«m.unication channels pass. A further significant difference between 
the claimed invention and the prior art is that, in the invention, the central traffic 

cooidinationunitnever initiates commumcation so thatthe central traffic 
protected against attacks that use communication initiation. 

Due tothese important and basic differences between the Invention and the prior art, it 
can be concluded that the locations and ^movement" of the code keys employed in the 
invention could not be set up in the ^paratus and method disclosed in Sasmazel '101. as well 
as in other prior apparatuses and methods. This is due to the feet that the structure of the 
invention, the location of the code keys, and the movement thereof differ from those of 
known systems, resulting in achievement of an inventive step not found in prior systems. 

It should be noted that the above arguments were presented to the International 
Preliminary Examining Authority (IPEA) in order to overcome a rejection of the 
corresponding international application based on the same reference (Sasmazel 'lOl), and 
that the claims of the corresponding international application recite the same subject matter 
as, and are virtually identical to. the claims pending in the present appUcation. Moreover, it 
should also be noted that the international claims were accepted by the European Patent 
Office (EPO) and that, as a result, a European patent was granted and was validated in more • 
than twenty (20) European countries. Therefore, for the same reasons that the claims of the 
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mtem-ional plication w«. allowed ^ vdidated toughou. Eu«^ fte pre,«« 
U.S. claims should also be allowed. 



DisCUSSiftn nf Cited Prior ^ rt 

HoM^ver, there are additional reasons for distinguishing the inve^^ 
from the Cited prior art Specifically, on page 2 of the final Office Action, the Examiner 
alleges that, in Sasmazel ' 101, each transmitting terminal device (end unit 1 10 of Figure 1) 
includes a receiver partial unit and a storage partial unit, the Examiner citing column 5, lines 
35-45 and column 8. lines 23-32 of Sasmazel '101 (see paragraph 3. lines 1-8 on page 2 of 
the final Office Action). However, such is not the case because column 5, lines 35-45 of 
Sasmazel '101 only discloses a memoiy 202 contained in the call complex 102 which, 
according to the Examiner's analysis, corresponds to the claimed central traffic coordination 
unit, while column 8, lines 23-32 does not mention any receiver partial unit or storagepartial 
unit at all. Thus, Sasmazel '101 does not disclose or suggest a receiver partial unit and/or a 
storage partial unit disposed in a transmitting terminal device, as recited in independent 
claim 5. This is admitted on page 5 of the final Office Action (see page 5, lines 6- 11 of the 
final Office Action). 

In the latter regard, on page 5 of the final Office Action, the Examiner alleges that 
these features are weU known hi the art, and cites Figure 3 of Zeidler '530 as allegedly 
disclosing a receiver partial unit and a storage partial unit However, the Examiner does not 
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cite my element in Fi^ 3 of the reference as e«.«,p„„<u„g ,„ ^ teceiverpartol urdt or 
the storegep^ial unit reei.«l to mdependent claim 5 of this appBeation (see page 5. Itoes 2- 
15 of the fi«al Office Actio.), to fict. the description of Figure 3 appeari.^ at cohm™ 7. 
Unes2«.30 of Zeidle, "530 th« Figure 3 of the ,efcr«.ce i5 an op^onai block diagram 
representation of the manner in which a us« initiated transaction re^ieat is iiMM, 
pnwessed by the nansactioo terminal. Hus. there would be no need for a receive, p.rri. I 
unit in Figure 3 since the anangement disclosed therein is used only for the purpose of 
preparing transmissions . 

In fkct. areview of the detailed description of Figures (appearing at column 10, line 
67-column 1 2. line 68 of Zeidler '530 ) does not reveal any mention of a receiver partial unit 
or a storage partial unit witii the functions recited in independent claim 5 of the present 
application. 

Finally, in the paragraph bridging pages 7 and 8 of the final Office Action, the 
Examiner countei^argues that "Sasmaal discloses in paragraph 34 that each unit tenninal 
comprises memory (e.g., storage) and one or more interfaces (e.g.. receiver partial unit)" 
(quoting fiom the sentence bridging pages 7 and 8 of the final Office Action). However, 
whereas paragraph 34 of Sasmazel '101 mentions call complex 102. there is no mention 
whatsoever of a memory or interfeces, as alleged by the Examiner. 

On pages of the final Office Action, the Examiner further argues that "the teaching of 
Zeidler provides storage for key data. Refer to fig. 3, figure item 34" (quoting from age 8. 
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lines 1-2 of the final Office Action). However, that does not constitute a disclosure of a 
receiver partial unit or storage partial unit as recited in independent claim 5. 

At page 2, last two lines of the final Office Action, the Examiner alleges that 
Sasmazel '101 discloses that a storage partial unit in a transmitting tenninal device includes a 
D-register containing a device identification signal, but (as mentioned above) Sasmazel'lOl 
does not disclose a storage partial unit in a transmitting terminal device, and in fact it does 
not disclose a D-register in any storage partial unit At page 8, lines 3-7 of the final Office 
Action, the Examiner cites paragraph 45 of Sasmazel '101, but that paragraph does not 
mention a storage partial unit or a D-register contained therein. 

Furthermore, in making the above assertion, the Examiner cites column 1 1, lines 1-10 
for the alleged disclosure of a request containing a tenninal ID and an IP address code but 
those items are not found at column 1 1, lines 1-10 of Sasmazel '101. 

Moreover, at page 3, lines 3-12 of the final Office Action, the Examiner alleges that 
Sasmazel '101 discloses a C-register storing a coding key and connected to a sender partial 
unit (citing Figure 1 of the reference). However, a review of Sasmazel '101 reveals that the 
memoiy for storing a coding key, as contained in call complex 102, is not connected to end 
unit 1 10, or to any sender partial unit contained therein. 

In addition, at page 3, lines 13-16 of the final Office Action, the Examiner aUeges that 
Sasmazel '101 discloses a storage partial unit of each transmitting tenninal device which 
includes at least one temporary storage register for the temporary storage of coding keys of 
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other transmitting terminal devices, citing column 11, lines 20-30 of the reference. 
However, the end unit identification code referred to at column U, lines 20-21 ofSasmazel 
• 1 0 1 is not a key for encoding/decoding transmissions, but rather it is the identification code 
for end unit 2 as stored in end unit 2 itself Moreover, it does not constitute a coding key of 
oAer end units or transmitting terminal devices as alleged by the Examiner. 

At page 3, line 17-page 4, line 1 1 of the final OflBce Action, the Examiner refers to 
the call complex 102 as having an MD-register for storing a master decodmg key, and also 
refers to the end units as having C-registers. However, none of the cited portions of 
SasmazeriOl discloses orsuggests C-registers or D-registers. This is admitted on page 5 of 
ihe Office Action (see page 5, lines 6-1 1 of the final Office Action). 

In the latter regard, at page 5, lines 12-18 of the final Office Action, the Examiner 
cites Figures 3 and 5 of Zeidler '530 , and specificaUy the table 78 of Figure 5, as 
corresponding to the claimed C-register and D-register. However, the disclosure of Zeidler 
'530 does not support this allegation. 

SpecificaUy, Zeidler *530 does not disclose that the table 78 is part of a storagepardal 
unit, as claimed. In addition, a review of the ^ecification of Zeidler '530 to reveal a 
disclosure of all of the operations perfiMmed with respect to the C-rcgister andtheD-iegister, 
as recited in independent claim 5 of the present application. For example, Zeidler '530 does 
not disclose that C-registers of an infonnation transmitting terminal device are provided with 
a master coding key collaborating with a master decoding key stored in an MD-register of a 
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central traffic coordinating unit, as recited in independent claim 5 of the present application. 
In the latter regard, no portions of the disclosure of Zeidler '530 are ched as disclosing the 
specifically recited operations relating to the C-register and the D-register of independent 
claim 5. 

In addition, in the second complete paragraph on page 4 of the final Office Action, the 
Examiner alleges that, in the storage partial unit of a first transmitting terminal device, there 
is Mljr information free from the coding key of the first transmitting terminal device, the 
Examiner citing column 8, lines 15-25 of Sasmazel '101. However, the cited portion of 
Sasmazel '101 merely discusses encryption, transmission of an authorization request, and 
identification of the request, but does not at all disclose or suggest that there is, in a storage 
partial unit of a first transmitting terminal device, only information free from the coding key 
of a first transmitting temiinal device. 

Furthermore, referring again to flie second complete paragraph on page 4 of the final 
Office Action, there is no disclosure or suggestion of a temporary storage register of a first 
transmitting termmal device, and the oid-unit-to-end-unit session key referred to at column 
11, lines 35-45 of Sasmazel '101 (cited in the final Office Action) is not a coding key of a 
first transmitting terminal device, as alleged in the final Office Action. 

In the ttaxd complete paragraph on page 4 of the final Office Action* the Examiner 
alleges that Sasmazel '101 discloses that only the coding key of the first transmitting temiinal 
device (end unit) participating in an information exchange is temporarily stored in a 



PA6E2M2'R(»DAT7<22l20105:31:24PM|!EastemDayOglitrBne]'SVKUSPT^ 



07/22/2010 17:31 FAX 7034507914 J SEEBER * PTO 1^025/032 



-20- 

temporaiy storage register of a second transmitting terminal device, the Examiner again 
citing column 11, lines 35-45 of the reference. However, such a temporary storage register 
of a transmitting terminal device is not disclosed in the cited portion of Sasmazel '101, or in 
Sasmazel '101 in its entirety. Furthermore, the cited portion of Sasmazel '101 does not refer 
to a coding key of a first transmitting terminal device, but rather refers to an end unit to end 
unit session key EUEUSK, In feet, the lack of disclosure of any temporary storage register 
in Sasmazel '101 is admitted on page 5 of the final Office Action (specifically, see page 5, 
lines 6-1 1 of the final Office Action). 

In the latter regard, at page 6, lines 1 -4 of the final Office Action, the Examiner cites 
the active transaction table 81 of Figure 5 of Zeidler '530 as corresponding to the claimed 
temporaiy storage register of independent claim 5. However, Zeidler '530 does not disclose 
the specific functions of the temporary storage registers included in the storage partial unit, 
as recited in independent claim 5. In feet, no portion of the specification of Zeidler '530 is 
cited in the final Office Action as describing the fenctions of the active transaction table 81 
of Figure 5 of Zeidler '530. 

The operation of the active transaction table 81 of Figure 5 of Zeidler '530 is 
described at column 13, lines 42-45 of the reference, but it only describes an operation 
whereby a transaction trace number and a terminal identification number related to a 
transaction initiated by a terminal are stored, tiie transaction being a transmission requested 
by the terminal. In contrast, independent claim 5 of the present application calls for the 
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storage, in a temporary storage register of a first information transmitting terminal device, of 
the coding key of a second information liansmitting terminal device which is participatiAg in 
an information exchange with the first infoimation transmitting teminal device. 

For the reasons stated above, it is respectfully submitted that, contrary to the 
assertionsinthe final Office Action, Sasmazel' 101 inviewofZeidler'530 does not disclose 
or suggest the invention as recited in independent claim 5. Therefore, a rejection under 35 
U.S.C. 103 is inappropriate. 

In addition, the dependent claims of the present application fiirther distinguish the 
mvention fix)m the cited prior art. Specifically, referring to dependent claim 6, in paragraph 
4 on page 6 of the final Office Action, it is alleged that Sasmazel '101 discloses temporaiy 
storage registers of transmitting tenninal devices connected to a sender partial unit, citing 
Figures 1-3 of the reference. However, as indicated above, Sasmazel ' 101 does not disclose 
sender partial units of terminal devices, and therefore there is no disclosure or suggestion of 
temporary storage registers of transmitting terminal devices connected to a sender partial 
unit 

Additional Arguments 
The main concept of the present invention is that the coding key and die decoding key 
cooperate with each other and with the infonnation transmitting tenninal devices, but the 
coding key is never stored and/or generated in or by its own information transmitting 
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tenxunal device. Rather^ it is stored in the central traffic coordinating unit, as seen in Figure 
1 of the present application. In addition, the coding key and the decoding key are never 
stored together in the same place. The decoding key is stored in its infonnation transmitting 
terminal device from the outset, whereas the coding key is stored at the outset in the central 
traffic coordinating unit, but is sent from that location to another information transmitting 
terminal device which does not have the cooperating decoding key. Thus» the coding key/ 
decoding key pairs are never stored in the same place. This is an hnportant distinction 
between the present invmtion and the prior art cited agauist this £q>plication. 

Anotibter major distinction between the present invention and the cited prior ait resides 
in the &ct that, in the invention, asymmetric keys are used, while the prior art arrangements 
use synmietric keys. That is, both references cited in the final Office Action use symmetric 
keys for communications — specifically, DES in Zeidler '530 and session keysin Sasmazel 
'lOL The main problem with the use of symmetric keys (DES, AES, Blowfish, Triple ES, 
Sezpent, Twofish etc.) is the vulnerability experienced when distributing these keys. This is 
quite obvious and is pointed out in Zeidler '530 as follows: "The security of any system 
based on DES processing is dependent upon the integrity of key generation and distribution 
as well as upon the human-related management and operational procedures established for 
the system" (quoting from colimm 3, lines 8-12 of Zeidler '530), Furthermore these keys 
need to be changed on a regular basis: ''[M]aster keys are typically used for longer periods of 
time that could extend into many months" (quoting from colunm 3, lines 34-35 of Zeidler 
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'530). In-house attacks cannot be excluded, only lessened: "Therefore, the potential 
vulnerability to in-house sophisticated attacks is lessened'* (quoting from column 5, lines 20- 
22 of Zeidler *530). Furthermore, in a system using symmetric keys, the keys needed to 
decrypt the information are present at several points in the network (see Acquirer and 
Network switch - retransmit the keys in Zeidler '530). 

In contrast, in the present invention^ solution keys needed to decrypt information are 
only present at the point where the information is intended to be used. 

All the symmetric encoding solutions have well known attacks, such as; linear 
cryptanaly sis fhttP://en. wikipedia.oriz/wiki/ljnear civptanalvsisl differential ciyptoanalysis 
(see '*Eli Biham and Adi Shamir in the late 1 980s, who published a number of attadcs against 
various block ciphers and hash functions, including a theoretical weakness in the Data 
Encryption Standard (DES)." — http://cn.wikipedia.Qrg/wiki/Difrerenliai crvptanalvsisV 
impossible differential cryptoanaly sis, integral cryptoanaly sis (applied to Twofish 1^ Ste&n 
Lucks), 

Thus, transmission of messages encrypted only with symmetric keys has several 
security issues. Accordingly, the present invention excludes transferring any information 
encrypted only with symmetric keys, and excludes sendhig any key that can be used to 
decrypt any information. 

Confidentiality is a main attribute of any public key encryption. Confidentialify means 
ensuring that information is accessible onty to those authori2ed to have access^ Since the 
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present inventioa uses the very same mathematical base as the public key encryption, it 
provides confidentiality. Thus, in the invention, only the managing server has Ihe encodinp 
keys of the endpoints> and therefore only the server can contact them . Only the endpoints of 
a given network have the encoding key of the managing server, and therefore only the 
endpoints belcmging to the network can initiate communication to the managing server. 

All of the prior art systems and networics, including those disclosed in Sasmazel '101 
and Zeidler '530, miss the mahi point of the present invention, that is, use of asymmetric 
encoding algOTthm key pairs. Thus, the present invention provides the following features 
and advantages : 

(1) any decoding key identifies an information target point (endpoint or server), and 
this decoding key never leaves this point: 

(2) possessing any server encoding key belonging to a server decoding key embodies 
entitlement to access the aformentioned server's network (the server itself and the other 
endpoints), and these keys are never transmitted through the network; 

(3) on the server side, possessing any endpointfs encoding key embodies entitlement 
to manage the endpoint, provided that the endpoint has the server's encoding k^; 

(4) keys needed to encrypt any useful information are only present at the point where 
information is intended to be utilized, and thes^ keys are never transmitted throughout the 
network; 
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(5) in-house attacks are excluded since the server never retransmits any useful 
information (only encrypted keys); and 

(6) operators of the system have no ability to eavesdrop on the communication 
while, hi contrast, Zeidler *S30 provides that the operator of an acquirer or network switch 
can access all infomiation^ and Sesmazel * 101 provides that the operator of the call complex 
can access all infomiation on both sides. 

Conclusion 

In the view of the above, it is submitted that the claims of the present application are 
in condition for allowance, and early issuance of this application is solicited. If there aie any 
problems or issues remaining, the Examiner is requested to telephone the undersigned 
attorney at the below-listed local telephone number. 

A Petition for Extension of Time and a Request for Continued Examination (RCE) 
are being filed concurrently herewith, and contain an authorization to charge the extension 
and RCE fees to Deposit Account 19-1070. The Commisioner is authorized to charge any 
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Post Office Box 7S0 
Great FaUs,VA 22066 
Telephone: (703)430-1702 
Facsimile: (703)450-7914 
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Respectfully submitted, 
Miklds JOBB AGY et al 
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Reg. No. 27,719 
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Other fees whioh are incurred to Deposit Account No. 19-1070. A duplicate of this sheet is 
enclosed. 

Respectfully submitted, 
Mikl6s JOBBAgY et al 

By: 

Joseph G. Seeber 
Reg. No. 27,719 
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Great FaUs,VA 22066 
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